106 matches found
CVE-2022-24637
CVE-2022-24637 Open Web Analytics OWA - 未认证远程代码执行 https://vulners.com/cve/CVE-2022-24637 示例 root@kitploit: python3 exploit.py -u admin -p hacker http://target.org 10.10.11.12 4444...
CVE-2022-24637
CVE-2022-24637 Open Web Analytics 1.7.3 - Remote Code Execution Exploit v2 Working exploit for Open Web Analytics 1.7.3 - RCE enhenced with pentestmonkey's php reverse shell, Fixed issue of not able to find user in cache. Original soruce exploit can be found on here Usage Add your attacker...
CVE-2022-24637
Vulnerable Application Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with ' and get IPAddress, e.g 172.22.0.2 Database...
CVE-2022-24637
CVE-2022-24637 Open Web Analytics OWA 1.7.3 中未经认证的远程代码执行利用程序。此工作基于 https://devel0pment.de/?p=2494。 免责声明：此脚本用于审计系统安全性。请仅在您自己的系统或已获得书面许可的系统上使用此脚本。...
CVE-2022-24637
CVE-2022-24637 Unauthenticated RCE in Open Web Analytics version / newPassword YourIp YourPort It might be possible that you need to run it a few times to get a shell. The script can be improved...
Open Web Analytics 1.7.3 - Remote Code Execution
Open Web Analytics OWA before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '?php instead of the intended "?php sequence aren't handled by the PH...
CVE-2022-24638
AS SEEN ON EXPLOITDB: https://www.exploit-db.com/exploits/51026 THIS VERSION IS FIXED TO PREVENT FALSE NEGATIVES CVE-2022-24637 Exploit for the Unauthenticated RCE in Open Web Analytics OWA 1.7.4. This work is based on https://devel0pment.de/?p=2494. DISCLAIMER: This script is made to audit the...
CVE-2022-24637
CVE-2022-24637 — Open Web Analytics anterior a 1.7.4 Notas defensivas sobre un problema crítico de divulgación de información no autenticada en Open Web Analytics OWA que puede conducir a una escalada de privilegios. Encontrado mientras se trabajaba en la máquina Fruityloops en echoCTF, que...
CVE-2026-86810
A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...
CVE-2026-86810 Open-Web-Analytics Controller Controller.php checkCapabilityAndAuthenticateUser improper authentication
A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...
CVE-2026-86810 Open-Web-Analytics Controller Controller.php checkCapabilityAndAuthenticateUser improper authentication
A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...
EUVD-2026-74161
A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...
CVE-2026-86810 Open-Web-Analytics Controller Controller.php checkCapabilityAndAuthenticateUser improper authentication
A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...
CVE-2026-86810
Open-Web-Analytics (up to 1.9.1) contains an improper authentication vulnerability in the checkCapabilityAndAuthenticateUser function within Core/Controller.php (Controller component). A remote, unauthenticated attacker can manipulate this function to bypass authentication checks. The CVSS 3.1 sc...
PT-2026-88457
A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...
EUVD-2014-1287
Malware in sbrugna...
EUVD-2014-1533
Malware in sbrugna...
EUVD-2014-2332
Malware in sbrugna...